         gran1 (save-granule coll1)
         gran2 (save-granule coll2)
         create-acl #(:concept_id (ac/create-acl (u/conn-context) % {:token token}))
-        update-acl #(ac/update-acl (u/conn-context) %1 %2 {:token token})]
+        update-acl #(ac/update-acl (u/conn-context) %1 %2 {:token token})
+        ;; required to create catalog item acl
+        _ (create-acl (assoc-in provider-acl-for-catalog-item [:group_permissions 0 :group_id] created-group-concept-id))]
 
     (u/wait-until-indexed)
 

        create-acl #(:concept_id (ac/create-acl (u/conn-context) % {:token token}))
        update-acl #(ac/update-acl (u/conn-context) %1 %2 {:token token})
        get-collection-permissions #(get-permissions %1 coll1)
        get-granule-permissions #(get-permissions %1 gran1)]

    (testing "no permissions granted"
      (are [user permissions]

                                  :no-temporal true})
        create-acl #(:concept_id (ac/create-acl (u/conn-context) % {:token token}))
        update-acl #(ac/update-acl (u/conn-context) %1 %2 {:token token})
        get-coll-permissions #(get-permissions :guest coll1 coll2 coll3 coll4)
        ;; required to create catalog item acl
        _ (create-acl provider-acl-for-catalog-item)]
    (u/wait-until-indexed)
    (is (= {coll1 []
            coll2 []
